{
  "schema_version": "1.6.0",
  "id": "CLR-2026-3036",
  "modified": "2026-07-16T12:00:00Z",
  "published": "2026-07-16T12:00:00Z",
  "summary": "Dependency-confusion package that steals AWS, SSH and npm credentials from Across Protocol developers",
  "details": "The npm package @across-toolkit/typescript-config@99.0.0 is a dependency-confusion attack aimed at developers of Across Protocol (across.to). It masquerades as an internal “ESLint/TypeScript config for the across.to toolkit,” and publishes an absurdly high version (99.0.0) so a misconfigured install resolves it from the public registry instead of the private one. Its postinstall hook then reads the host’s AWS credentials, SSH private key, npm token and environment and POSTs them to a hardcoded webhook.site endpoint — a straight credential grab on any developer machine or CI runner that installs it.",
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "@across-toolkit/typescript-config"
      },
      "versions": [
        "99.0.0"
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://research.codelake.dev/advisories/clr-2026-3036-across-toolkit-typescript-config"
    }
  ],
  "credits": [
    {
      "name": "Sascha Klein, codelake Research",
      "type": "FINDER",
      "contact": [
        "https://research.codelake.dev"
      ]
    }
  ],
  "database_specific": {
    "caseId": "CLR-2026-3036",
    "kind": "malware",
    "class": "Dependency-confusion credential stealer",
    "severity": "Critical",
    "status": "Confirmed malicious",
    "iocs": {
      "ips": [],
      "hashes": [
        "sha256:396023e88ed887f45495ab2fc1d6f2ce91186e4f888136d0f7000639ca758511"
      ],
      "indicators": [
        "@across-toolkit/typescript-config@99.0.0 (npm) — fake \"across.to toolkit\" config, no repository",
        "396023e88ed887f45495ab2fc1d6f2ce91186e4f888136d0f7000639ca758511 (tarball)",
        "package.json: \"postinstall\": \"node postinstall.js\" — runs on install, before import",
        "https://webhook.site/a585f4ec-20f7-4bd1-bac7-f3e53799dc5f (POST exfil)",
        "reads ~/.aws/credentials, ~/.ssh/id_rsa, ~/.npmrc, process.env (via os.homedir)",
        "dependency confusion — version 99.0.0 to win resolution; targets the @across-toolkit scope"
      ]
    }
  }
}